Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ddcc9b1e-91e5-34be-bf85-8bfde7b5645d.roa
File:                     ddcc9b1e-91e5-34be-bf85-8bfde7b5645d.roa (raw, json)
Hash identifier:          BRLYeA9UxsUp0ky294LfYlm6IdRm9YCsIeMHyQda4EU=
Subject key identifier:   B4:D5:48:1A:D8:39:16:01:35:00:44:F3:9A:40:F6:6A:85:02:24:64
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D11727F11ADFF4A9E0CC9AC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ddcc9b1e-91e5-34be-bf85-8bfde7b5645d.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:7f:11:ad:ff:4a:9e:0c:c9:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=537edcd5-fc71-41a3-9026-6540f8e9540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:55:6b:73:8a:09:85:7f:c1:f0:9d:52:18:
                    1a:ca:52:e8:c2:42:bd:0a:c4:e1:38:17:5f:6d:fc:
                    35:34:c5:0d:e8:96:c6:d9:c9:41:72:26:a3:fd:22:
                    3f:7a:17:28:25:e2:f6:51:80:2e:65:3f:7d:af:99:
                    c1:d2:fd:5f:9d:44:3b:3e:6d:b0:1a:1d:a8:e7:db:
                    c0:25:7c:fb:c0:d9:6b:23:9e:d4:4c:e7:e1:84:c1:
                    87:be:f1:2b:08:d6:c9:dd:86:23:da:ef:30:38:b9:
                    92:23:2b:34:87:47:b4:e7:e8:a5:a4:d5:6d:a7:55:
                    63:41:18:03:2b:09:43:73:89:a2:76:dc:08:a8:7b:
                    6e:43:0e:3f:64:49:dd:7d:24:63:c8:ab:9d:1c:38:
                    92:9e:e8:66:b7:a2:f7:5b:05:76:74:2f:3a:14:8d:
                    09:7b:03:4a:8d:cc:f4:aa:78:de:0a:ec:3d:2e:ba:
                    b4:d0:76:15:32:a2:b8:f5:2c:e8:60:9e:05:63:f9:
                    0b:a5:9a:5b:3f:5b:f6:6a:e3:95:3b:2e:cc:61:c3:
                    2d:7a:be:53:e8:85:78:f0:68:3e:fd:38:f2:8f:85:
                    0f:7b:c7:33:10:56:fe:34:b2:de:55:13:aa:8e:ba:
                    03:a8:93:76:1a:5e:4c:42:a4:0c:a7:4d:27:18:c5:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:48:1A:D8:39:16:01:35:00:44:F3:9A:40:F6:6A:85:02:24:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ddcc9b1e-91e5-34be-bf85-8bfde7b5645d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:03:b6:aa:02:73:4a:28:9f:3a:93:e2:d0:87:05:8d:27:8e:
         95:34:62:7a:b8:70:e0:1a:9c:de:52:5f:5c:34:da:43:e2:e1:
         79:6c:ce:4a:49:8e:12:75:82:9a:fd:54:be:72:06:3b:da:6a:
         f7:68:04:d0:e1:94:f1:a2:ad:3a:28:2f:49:4e:8e:dc:fd:ba:
         ea:e3:00:6e:c3:7e:3c:41:b0:43:b6:8e:64:d0:14:34:e6:52:
         8f:90:c6:d9:b5:11:93:b3:41:4f:29:a7:a4:a5:d3:7d:3f:79:
         b1:6c:46:60:06:a1:9a:d0:97:20:c1:40:3f:28:f7:94:6a:ed:
         01:83:31:11:77:75:2c:d1:9e:4f:f3:71:52:1f:99:4b:ee:9b:
         a0:b4:d9:29:a1:c0:4b:0d:db:e0:14:b1:18:f6:08:d6:07:47:
         1f:67:fd:52:a1:c2:a8:74:91:fc:4c:6a:bb:d8:5b:27:7e:65:
         09:87:5c:60:f1:f7:75:f9:b3:20:1f:19:27:86:88:d7:1b:30:
         49:4d:90:4e:a6:1d:83:1a:38:2f:e4:5e:f7:97:df:6c:33:1e:
         7f:6c:9b:52:e0:e1:91:ec:83:8a:8a:40:92:10:09:f0:f1:a4:
         ff:47:ed:06:02:07:e8:7f:97:b6:c7:49:54:76:30:32:bc:9a:
         bf:f8:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:08 2026 by rpki-client